diff options
| author | Vesa Jääskeläinen <vesa.jaaskelainen@vaisala.com> | 2020-04-30 14:37:09 +0200 |
|---|---|---|
| committer | Jens Wiklander <jens.wiklander@linaro.org> | 2020-05-11 14:11:26 +0200 |
| commit | e33bcbab16d1c0dd85d72bec275308369ad901f5 (patch) | |
| tree | 1dd62de011aafe451df09d29bdf11bf1ddb68cd8 /drivers/tee/Kconfig | |
| parent | Linux 5.7-rc2 (diff) | |
| download | linux-e33bcbab16d1c0dd85d72bec275308369ad901f5.tar.xz linux-e33bcbab16d1c0dd85d72bec275308369ad901f5.zip | |
tee: add support for session's client UUID generation
TEE Client API defines that from user space only information needed for
specified login operations is group identifier for group based logins.
REE kernel is expected to formulate trustworthy client UUID and pass that
to TEE environment. REE kernel is required to verify that provided group
identifier for group based logins matches calling processes group
memberships.
TEE specification only defines that the information passed from REE
environment to TEE environment is encoded into on UUID.
In order to guarantee trustworthiness of client UUID user space is not
allowed to freely pass client UUID.
UUIDv5 form is used encode variable amount of information needed for
different login types.
Signed-off-by: Vesa Jääskeläinen <vesa.jaaskelainen@vaisala.com>
[jw: remove unused variable application_id]
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Diffstat (limited to 'drivers/tee/Kconfig')
| -rw-r--r-- | drivers/tee/Kconfig | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/tee/Kconfig b/drivers/tee/Kconfig index 8da63f38e6bd..806eb87d4da0 100644 --- a/drivers/tee/Kconfig +++ b/drivers/tee/Kconfig @@ -3,6 +3,7 @@ config TEE tristate "Trusted Execution Environment support" depends on HAVE_ARM_SMCCC || COMPILE_TEST || CPU_SUP_AMD + select CRYPTO_SHA1 select DMA_SHARED_BUFFER select GENERIC_ALLOCATOR help |